The Department of Computer Science and Engineering, a joint department of Chalmers and the University of Gothenburg, is looking for a postdoc position in an exciting national project focusing on software security, with great opportunities for collaborations with top researchers in cybersecurity, program analysis, and software engineering. The position is salaried (not just fully funded) and part of a lively research environment located in the beautiful city of Gothenburg on the West coast of Sweden.
The position is part of the ShiftLeft project funded by WASP, a flagship project with partner universities at KTH, Linköping, and Umeå.
Project description
Software is often the root cause of vulnerabilities in modern computing systems. By focusing on securing the software, we target principled security mechanisms that provide robust protection against large classes of attacks. Modern software applications are almost never built from scratch but reuse a significant amount of code that has been built by 3rd parties. These code artifacts, in the form of externally developed libraries, packages, and frameworks form the core of their so-called software supply chain. The goal of ShiftLeft is to contribute to a new paradigm shift for securing software supply chains.
As a postdoc in the project, you will focus on human-in-the-loop aspects of a self-adaptive security analysis platform. The platform performs static and dynamic security analysis. The idea is that not all analysis results shall be displayed the same way all the time, but different vulnerabilities and analysis results will be more or less relevant in different situations. Some of the questions you will be able to address as part of your postdoc are: (i) how can an adaptive human-in-the-loop layer be designed that dynamically adjusts what security analysis results are displayed, depending on the context?, (ii) what human and contextual factors are relevant to consider (e.g., experience of the developer, stress, expectations, …)?, and (iii) how can relevant factors be formally modelled and used to adapt the displayed analysis results? The successful applicant will be encouraged to collaborate with PhD students and postdocs working on related topics in the ShiftLeft project and be involved in supervision.